Method, system, and computer program product for configuring a gateway

ABSTRACT

Provided is a method for configuring a gateway. The method may include a gateway monitoring current version data stored on at least one first server. The current version data may be associated with a current version of a configuration file. The first server may be remote from the gateway. The current version data may be modified at the first server. In response to the gateway determining that the current version data stored on the first server has been modified, a configuration service may be invoked to retrieve the current version of the configuration file from at least one repository based on the current version data. The repository may include at least one second server remote from the gateway and the first server. The gateway may store a copy of the current version of the configuration file retrieved by the configuration service. A system and computer program product are also disclosed.

BACKGROUND 1. Field

This disclosed subject matter relates generally to methods, systems, andproducts for configuring a gateway and, in some particular embodimentsor aspects, to a method, system, and computer program product fordynamically configuring a payment gateway.

2. Technical Considerations

Certain computer systems may use configuration files to control certainfunctionality. For example, certain gateways (e.g., payment gateways)may use configuration files (e.g., Extensible Markup Language (XML)files and/or the like) for certain gateway functions (e.g., validationrules, transformation, response code to error code mapping, and/or thelike). Such configuration files may be packaged with theapplication/module (e.g., gateway application) that is deployed on thegateway. As such, if a change is to be made to the configuration filesor a portion thereof (e.g., a change to the validation rules,transformation, code mapping, and/or the like), an entirely newapplication package (including the modified configuration file) must bedeployed on every node (e.g., server) using the application. However,certain computer systems (e.g., payment gateways) may employ multiplenodes (e.g., tens of nodes, 50 nodes, 75-80 nodes, hundreds of nodes,and/or the like). It can be burdensome/expensive in terms of computingresources and time consuming to individually deploy such applicationpackages to all of the nodes. Additionally or alternatively, it may benecessary to bring the node (e.g., server) offline while the newapplication package is being deployed thereto. Additionally oralternatively, if the changes to the configuration files are relativelysmall (e.g., changes to only one or two files), it can becounterproductive to build an entire new application package and deploythe (relatively large) application package to each node (e.g., using arelatively large amount of computing resources to implement a relativelysmall change in the configuration files).

Additionally or alternatively, certain computer systems (e.g., paymentgateways) may process a relatively large volume of data (e.g.,transactions) very quickly (e.g., in a relatively short period of time).For example, a payment gateway may continuously process thousands oftransactions in short time periods (e.g., 2,000-4,000 per ten seconds).However, if the aforementioned time-consuming process of deploying newapplication packages is used to implement modifications to theconfiguration files, the time elapsed may result in many (e.g.,thousands) of transactions being processed with outdated configurationfiles. For example, transactions that should be validated based on thecurrent configuration files may be rejected because the node at whichsuch transactions are processed is still using previous configurationfiles during the time while the application packages are being deployed.Additionally or alternatively, transactions that should be rejectedbased on the current configuration files may be validated because thenode at which such transactions are processed is still using previousconfiguration files during the time while the application packages arebeing deployed.

SUMMARY

Accordingly, it is an object of the presently disclosed subject matterto provide methods, systems, and computer program products forconfiguring a gateway.

According to non-limiting embodiments or aspects, provided is a methodfor configuring a gateway. In some non-limiting embodiments or aspects,a method for configuring a gateway may include monitoring, by a gateway,current version data stored on at least one first server. The currentversion data may be associated with a current version of a configurationfile for the gateway. The first server(s) may be remote from thegateway. At the first server(s), the current version data may bemodified. The gateway may determine that the current version data storedon the at least one first server has been modified. In response to thatdetermination, a configuration service may be invoked. The configurationservice may retrieve the current version of the configuration file fromat least one repository based on the current version data. Therepository may include at least one second server remote from thegateway and the first server(s). The gateway may store a copy of thecurrent version of the configuration file retrieved by the configurationservice.

In some non-limiting embodiments or aspects, monitoring the currentversion data may include monitoring, by a first agent on the gateway, aview of the current version data from a second agent on the at least onefirst server. Additionally or alternatively, determining the currentversion data stored on the at least one first server has been modifiedmay include detecting, by the first agent, that the view of the currentversion data has been modified. Additionally or alternatively, the firstagent may include a client agent of a cluster, and the second agent mayinclude a server agent of the cluster.

In some non-limiting embodiments or aspects, the current version datamay include at least one key associated with at least one identifier ofthe configuration file and/or at least one value associated with thecurrent version.

In some non-limiting embodiments or aspects, determining the currentversion data stored on the at least one first server has been modifiedmay include receiving, at the gateway, a notification from the firstserver(s) that the current version data has been modified.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may be uploaded to the repository before modifyingthe current version data. Additionally or alternatively, the gateway maydelete a copy of a previous version of the configuration file.

In some non-limiting embodiments or aspects, the gateway may include apayment gateway. Additionally or alternatively, the gateway may receivetransaction data associated with a payment transaction. Additionally oralternatively, the gateway may validate the payment transaction based onthe copy of the current version of the configuration file.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may include at least one of the following: validationrules, transformation rules, error code mapping, or any combinationthereof.

According to non-limiting embodiments or aspects, provided is a systemfor configuring a gateway. In some non-limiting embodiments or aspects,the system for configuring a gateway may include at least onerepository, which may be configured to store a current version of aconfiguration file. At least one first server may be configured to storecurrent version data associated with the current version of theconfiguration file. The first server(s) may be remote from therepository. A gateway may be remote from the first server(s) and therepository. The gateway may be configured to monitor the current versiondata stored on the at least one first server. The gateway may further beconfigured in response to determining that the current version datastored on the at least one first server has been modified, to invoke aconfiguration service. The configuration service may retrieve thecurrent version of the configuration file from the at least onerepository based on the current version data. The gateway may further beconfigured to store a copy of the current version of the configurationfile retrieved by the configuration service.

In some non-limiting embodiments or aspects, the gateway may include afirst agent. Additionally or alternatively, monitoring the currentversion data may include using the first agent, which may be configuredto monitor a view of the current version data from a second agent on thefirst server(s). Additionally or alternatively, determining the currentversion data stored on the first server(s) has been modified may includethe first agent (of the gateway) being configured to detect that theview of the current version data has been modified. In some non-limitingembodiments or aspects, the first agent may include a client agent of acluster, and the second agent may include a server agent of the cluster.

In some non-limiting embodiments or aspects, the current version datamay include at least one key associated with at least one identifier ofthe configuration file and at least one value associated with thecurrent version.

In some non-limiting embodiments or aspects, determining the currentversion data stored on the at least one first server has been modifiedmay include the gateway being configured to receive a notification fromthe first server(s) that the current version data has been modified.

In some non-limiting embodiments or aspects, the repository may beconfigured to have the current version of the configuration fileuploaded thereto. Additionally or alternatively, the first server(s) maybe configured to have the current version data thereon modified inresponse to the current version of the configuration file being uploadedto the repository.

In some non-limiting embodiments or aspects, the gateway may beconfigured to delete a copy of a previous version of the configurationfile.

In some non-limiting embodiments or aspects, the gateway may include apayment gateway. Additionally or alternatively, the gateway may beconfigured to receive transaction data associated with a paymenttransaction. Additionally or alternatively, the gateway may beconfigured to validate the payment transaction based on the copy of thecurrent version of the configuration file.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may include at least one of the following: validationrules, transformation rules, error code mapping, or any combinationthereof.

According to non-limiting embodiments or aspects, provided is a computerprogram product for configuring a gateway. The computer program productmay include at least one non-transitory computer-readable mediumincluding one or more instructions that, when executed by at least oneprocessor, cause the at least one processor to monitor current versiondata stored on at least one first server. The current version data maybe associated with a current version of a configuration file for agateway. The first server(s) may be remote from the gateway. In responseto determining that the current version data stored on the at least onefirst server has been modified, a configuration service may be invoked.The configuration service may retrieve the current version of theconfiguration file from at least one repository based on the currentversion data. The repository may include at least one second serverremote from the gateway and the first server(s). A copy of the currentversion of the configuration file retrieved by the configuration servicemay be stored.

In some non-limiting embodiments or aspects, monitoring the currentversion data may include monitoring, by a first agent on the gateway, aview of the current version data from a second agent on the firstserver(s). Additionally or alternatively, determining the currentversion data stored on the first server(s) has been modified may includedetecting, by the first agent, that the view of the current version datahas been modified. Additionally or alternatively, the first agent mayinclude a client agent of a cluster, and the second agent may include aserver agent of the cluster.

In some non-limiting embodiments or aspects, the current version datamay include at least one key associated with at least one identifier ofthe configuration file and at least one value associated with thecurrent version.

In some non-limiting embodiments or aspects, determining the currentversion data stored on the first server(s) has been modified may includereceiving a notification from the first server(s) that the currentversion data has been modified.

In some non-limiting embodiments, the current version of theconfiguration file may be uploaded to the repository before modifyingthe current version data. In some non-limiting embodiments or aspects, acopy of a previous version of the configuration file may be deleted(e.g., at the gateway).

In some non-limiting embodiments or aspects, the gateway may include apayment gateway. Additionally or alternatively, the instructions, whenexecuted by the processor(s), may further cause the at least oneprocessor to receive transaction data associated with a paymenttransaction and/or validate the payment transaction based on the copy ofthe current version of the configuration file.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may include at least one of the following: validationrules, transformation rules, error code mapping, and/or any combinationthereof.

Further embodiments or aspects are set forth in the following numberedclauses:

Clause 1: A method for configuring a gateway, comprising: monitoring, bya gateway, current version data stored on at least one first server, thecurrent version data associated with a current version of aconfiguration file for the gateway, the at least one first server remotefrom the gateway; modifying, on the at least one first server, thecurrent version data; in response to determining, by the gateway, thatthe current version data stored on the at least one first server hasbeen modified, invoking a configuration service, wherein theconfiguration service retrieves the current version of the configurationfile from at least one repository based on the current version data, theat least one repository comprising at least one second server remotefrom the gateway and the at least one first server; storing, by thegateway, a copy of the current version of the configuration fileretrieved by the configuration service.

Clause 2: The method of clause 1, wherein monitoring the current versiondata comprises monitoring, by a first agent on the gateway, a view ofthe current version data from a second agent on the at least one firstserver.

Clause 3: The method of clauses 1 or 2, wherein determining the currentversion data stored on the at least one first server has been modifiedcomprises detecting, by the first agent, that the view of the currentversion data has been modified.

Clause 4: The method of any preceding clause, wherein the first agentcomprises a client agent of a cluster, and the second agent comprises aserver agent of the cluster.

Clause 5: The method of any one of clauses 1-4, wherein the currentversion data comprises at least one key associated with at least oneidentifier of the configuration file and at least one value associatedwith the current version.

Clause 6: The method of any one of clauses 1-5, wherein determining thecurrent version data stored on the at least one first server has beenmodified comprises receiving, at the gateway, a notification from the atleast one first server that the current version data has been modified.

Clause 7: The method of any one of clauses 1-6, further comprisinguploading, to the at least one repository, the current version of theconfiguration file before modifying the current version data.

Clause 8: The method of any one of clauses 1-7, further comprisingdeleting, by the gateway, a copy of a previous version of theconfiguration file.

Clause 9: The method of any one of clauses 1-8, wherein the gatewaycomprises a payment gateway, the method further comprising: receiving,at the gateway, transaction data associated with a payment transaction;and validating, by the gateway, the payment transaction based on thecopy of the current version of the configuration file.

Clause 10: The method of any one of clauses 1-9, wherein the currentversion of the configuration file comprises at least one of thefollowing: validation rules, transformation rules, error code mapping,or any combination thereof.

Clause 11: A system for configuring a gateway, comprising: at least onerepository configured to store a current version of a configurationfile; at least one first server configured to store current version dataassociated with the current version of the configuration file, the atleast one first server remote from the at least one repository; agateway remote from the at least one first server and the at least onerepository; the gateway configured to: monitor the current version datastored on the at least one first server; in response to determining thatthe current version data stored on the at least one first server hasbeen modified, invoke a configuration service, wherein the configurationservice retrieves the current version of the configuration file from theat least one repository based on the current version data; store a copyof the current version of the configuration file retrieved by theconfiguration service.

Clause 12: The system of clause 11, wherein the gateway comprises afirst agent, and wherein monitoring the current version data comprisesthe first agent being configured to monitor a view of the currentversion data from a second agent on the at least one first server.

Clause 13: The system of clause 11 or 12, wherein determining thecurrent version data stored on the at least one first server has beenmodified comprises the first agent being configured to detect that theview of the current version data has been modified.

Clause 14: The system of any one of clauses 11-13, wherein the firstagent comprises a client agent of a cluster, and the second agentcomprises a server agent of the cluster.

Clause 15: The system of any one of clauses 11-14, wherein the currentversion data comprises at least one key associated with at least oneidentifier of the configuration file and at least one value associatedwith the current version.

Clause 16: The system of any one of clauses 11-15, wherein determiningthe current version data stored on the at least one first server hasbeen modified comprises the gateway being configured to receive anotification from the at least one first server that the current versiondata has been modified.

Clause 17: The system of any one of clauses 11-16, wherein the at leastone repository is configured to have the current version of theconfiguration file uploaded thereto, and wherein the at least one serveris configured to have the current version data thereon modified inresponse to the current version of the configuration file being uploadedto the at least one repository.

Clause 18: The system of any one of clauses 11-17, wherein the gatewayis configured to delete a copy of a previous version of theconfiguration file.

Clause 19: The system of any one of clauses 11-18, wherein the gatewaycomprises a payment gateway, the gateway configured to: receivetransaction data associated with a payment transaction; and validate thepayment transaction based on the copy of the current version of theconfiguration file.

Clause 20: The system of any one of clauses 11-19, wherein the currentversion of the configuration file comprises at least one of thefollowing: validation rules, transformation rules, error code mapping,or any combination thereof.

Clause 21: A computer program product for configuring a gateway, thecomputer program product comprising at least one non-transitorycomputer-readable medium including one or more instructions that, whenexecuted by at least one processor, cause the at least one processor to:monitor current version data stored on at least one first server, thecurrent version data associated with a current version of aconfiguration file for a gateway, the at least one first server remotefrom the gateway; in response to determining that the current versiondata stored on the at least one first server has been modified, invoke aconfiguration service, wherein the configuration service retrieves thecurrent version of the configuration file from at least one repositorybased on the current version data, the at least one repositorycomprising at least one second server remote from the gateway and the atleast one first server; store a copy of the current version of theconfiguration file retrieved by the configuration service.

Clause 22: The computer program product of clause 21, wherein monitoringthe current version data comprises monitoring, by a first agent on thegateway, a view of the current version data from a second agent on theat least one first server.

Clause 23: The computer program product of clause 21 or 22, whereindetermining the current version data stored on the at least one firstserver has been modified comprises detecting, by the first agent, thatthe view of the current version data has been modified.

Clause 24: The computer program product of any one of clauses 21-23,wherein the first agent comprises a client agent of a cluster, and thesecond agent comprises a server agent of the cluster.

Clause 25: The computer program product of any one of clauses 21-24,wherein the current version data comprises at least one key associatedwith at least one identifier of the configuration file and at least onevalue associated with the current version.

Clause 26: The computer program product of any one of clauses 21-25,wherein determining the current version data stored on the at least onefirst server has been modified comprises receiving a notification fromthe at least one first server that the current version data has beenmodified.

Clause 27: The computer program product of any one of clauses 21-26,wherein the one or more instructions, when executed by the at least oneprocessor, further cause the at least one processor to upload, to the atleast one repository, the current version of the configuration filebefore modifying the current version data.

Clause 28: The computer program product of any one of clauses 21-27,wherein the one or more instructions, when executed by the at least oneprocessor, further cause the at least one processor to delete a copy ofa previous version of the configuration file.

Clause 29: The computer program product of any one of clauses 21-28,wherein the gateway comprises a payment gateway, wherein the one or moreinstructions, when executed by the at least one processor, further causethe at least one processor to: receive transaction data associated witha payment transaction; and validate the payment transaction based on thecopy of the current version of the configuration file.

Clause 30: The computer program product of any one of clauses 21-29,wherein the current version of the configuration file comprises at leastone of the following: validation rules, transformation rules, error codemapping, or any combination thereof.

These and other features and characteristics of the presently disclosedsubject matter, as well as the methods of operation and functions of therelated elements of structures and the combination of parts andeconomies of manufacture, will become more apparent upon considerationof the following description and the appended claims with reference tothe accompanying drawings, all of which form a part of thisspecification, wherein like reference numerals designate correspondingparts in the various figures. It is to be expressly understood, however,that the drawings are for the purpose of illustration and descriptiononly and are not intended as a definition of the limits of the disclosedsubject matter. As used in the specification and the claims, thesingular form of “a,” “an,” and “the” include plural referents unlessthe context clearly dictates otherwise.

BRIEF DESCRIPTION OF THE DRAWINGS

Additional advantages and details of the disclosed subject matter areexplained in greater detail below with reference to the exemplaryembodiments or aspects that are illustrated in the accompanying figures,in which:

FIG. 1 is a diagram of a non-limiting embodiment or aspect of anenvironment in which methods, systems, and/or computer program products,described herein, may be implemented according to the principles of thepresently disclosed subject matter;

FIG. 2 is a diagram of a non-limiting embodiment or aspect of componentsof one or more devices of FIG. 1;

FIG. 3 is a flowchart of a non-limiting embodiment or aspect of aprocess for configuring a gateway according to the principles of thepresently disclosed subject matter; and

FIG. 4 is a diagram of a non-limiting embodiment or aspect of animplementation of a non-limiting embodiment or aspect of the processshown in FIG. 3.

DESCRIPTION

For purposes of the description hereinafter, the terms “end,” “upper,”“lower,” “right,” “left,” “vertical,” “horizontal,” “top,” “bottom,”“lateral,” “longitudinal,” and derivatives thereof shall relate to thedisclosed subject matter as it is oriented in the drawing figures.However, it is to be understood that the disclosed subject matter mayassume various alternative variations and step sequences, except whereexpressly specified to the contrary. It is also to be understood thatthe specific devices and processes illustrated in the attached drawings,and described in the following specification, are simply exemplaryembodiments or aspects of the disclosed subject matter. Hence, specificdimensions and other physical characteristics related to the embodimentsor aspects disclosed herein are not to be considered as limiting unlessotherwise indicated.

No aspect, component, element, structure, act, step, function,instruction, and/or the like used herein should be construed as criticalor essential unless explicitly described as such. Also, as used herein,the articles “a” and “an” are intended to include one or more items andmay be used interchangeably with “one or more” and “at least one.”Furthermore, as used herein, the term “set” is intended to include oneor more items (e.g., related items, unrelated items, a combination ofrelated and unrelated items, and/or the like) and may be usedinterchangeably with “one or more” or “at least one.” Where only oneitem is intended, the term “one” or similar language is used. Also, asused herein, the terms “has,” “have,” “having,” or the like are intendedto be open-ended terms. Further, the phrase “based on” is intended tomean “based at least partially on” unless explicitly stated otherwise.

As used herein, the terms “communication” and “communicate” may refer tothe reception, receipt, transmission, transfer, provision, and/or thelike of information (e.g., data, signals, messages, instructions,commands, and/or the like). For one unit (e.g., a device, a system, acomponent of a device or system, combinations thereof, and/or the like)to be in communication with another unit means that the one unit is ableto directly or indirectly receive information from and/or transmitinformation to the other unit. This may refer to a direct or indirectconnection (e.g., a direct communication connection, an indirectcommunication connection, and/or the like) that is wired and/or wirelessin nature. Additionally, two units may be in communication with eachother even though the information transmitted may be modified,processed, relayed, and/or routed between the first and second unit. Forexample, a first unit may be in communication with a second unit eventhough the first unit passively receives information and does notactively transmit information to the second unit. As another example, afirst unit may be in communication with a second unit if at least oneintermediary unit (e.g., a third unit located between the first unit andthe second unit) processes information received from the first unit andcommunicates the processed information to the second unit. In somenon-limiting embodiments or aspects, a message may refer to a networkpacket (e.g., a data packet and/or the like) that includes data. It willbe appreciated that numerous other arrangements are possible.

As used herein, the terms “issuer institution,” “portable financialdevice issuer,” “issuer,” or “issuer bank” may refer to one or moreentities that provide accounts to customers for conducting transactions(e.g., payment transactions), such as initiating credit and/or debitpayments. For example, an issuer institution may provide an accountidentifier, such as a personal account number (PAN), to a customer thatuniquely identifies one or more accounts associated with that customer.The account identifier may be embodied on a portable financial device,such as a physical financial instrument, e.g., a payment card, and/ormay be electronic and used for electronic payments. The terms “issuerinstitution” and “issuer institution system” may also refer to one ormore computer systems operated by or on behalf of an issuer institution,such as a server computer executing one or more software applications.For example, an issuer institution system may include one or moreauthorization servers for authorizing a transaction.

As used herein, the term “account identifier” may include one or moretypes of identifiers associated with a user account (e.g., a PAN, aprimary account number, a card number, a payment card number, a token,and/or the like). In some non-limiting embodiments or aspects, an issuerinstitution may provide an account identifier (e.g., a PAN, a token,and/or the like) to a user that uniquely identifies one or more accountsassociated with that user. The account identifier may be embodied on aphysical financial instrument (e.g., a portable financial instrument, apayment card, a credit card, a debit card, and/or the like) and/or maybe electronic information communicated to the user that the user may usefor electronic payments. In some non-limiting embodiments or aspects,the account identifier may be an original account identifier, where theoriginal account identifier was provided to a user at the creation ofthe account associated with the account identifier. In some non-limitingembodiments or aspects, the account identifier may be an accountidentifier (e.g., a supplemental account identifier) that is provided toa user after the original account identifier was provided to the user.For example, if the original account identifier is forgotten, stolen,and/or the like, a supplemental account identifier may be provided tothe user. In some non-limiting embodiments or aspects, an accountidentifier may be directly or indirectly associated with an issuerinstitution such that an account identifier may be a token that maps toa PAN or other type of identifier. Account identifiers may bealphanumeric, any combination of characters and/or symbols, and/or thelike. An issuer institution may be associated with a bank identificationnumber (BIN) that uniquely identifies the issuer institution.

As used herein, the terms “payment token” or “token” may refer to anidentifier that is used as a substitute or replacement identifier for anaccount identifier, such as a PAN. Tokens may be associated with a PANor other account identifiers in one or more data structures (e.g., oneor more databases and/or the like) such that they can be used to conducta transaction (e.g., a payment transaction) without directly using theaccount identifier, such as a PAN. In some examples, an accountidentifier, such as a PAN, may be associated with a plurality of tokensfor different individuals, different uses, and/or different purposes.For example, a payment token may include a series of numeric and/oralphanumeric characters that may be used as a substitute for an originalaccount identifier. For example, a payment token “4900 0000 0000 0001”may be used in place of a PAN “4147 0900 0000 1234.” In somenon-limiting embodiments or aspects, a payment token may be “formatpreserving” and may have a numeric format that conforms to the accountidentifiers used in existing payment processing networks (e.g., ISO 8583financial transaction message format). In some non-limiting embodimentsor aspects, a payment token may be used in place of a PAN to initiate,authorize, settle, or resolve a payment transaction or represent theoriginal credential in other systems where the original credential wouldtypically be provided. In some non-limiting embodiments or aspects, atoken value may be generated such that the recovery of the original PANor other account identifier from the token value may not becomputationally derived (e.g., with a one-way hash or othercryptographic function). Further, in some non-limiting embodiments oraspects, the token format may be configured to allow the entityreceiving the payment token to identify it as a payment token andrecognize the entity that issued the token.

As used herein, the term “provisioning” may refer to a process ofenabling a device to use a resource or service. For example,provisioning may involve enabling a device to perform transactions usingan account. Additionally or alternatively, provisioning may includeadding provisioning data associated with account data (e.g., a paymenttoken representing an account number) to a device.

As used herein, the term “token requestor” may refer to an entity thatis seeking to implement tokenization according to embodiments of thepresently disclosed subject matter. For example, the token requestor mayinitiate a request that a PAN be tokenized by submitting a token requestmessage to a token service provider. Additionally or alternatively, atoken requestor may no longer need to store a PAN associated with atoken once the requestor has received the payment token in response to atoken request message. In some non-limiting embodiments or aspects, therequestor may be an application, a device, a process, or a system thatis configured to perform actions associated with tokens. For example, arequestor may request registration with a network token system, requesttoken generation, token activation, token de-activation, token exchange,other token lifecycle management related processes, and/or any othertoken related processes. In some non-limiting embodiments or aspects, arequestor may interface with a network token system through any suitablecommunication network and/or protocol (e.g., using HTTPS, SOAP and/or anXML interface among others). For example, a token requestor may includecard-on-file merchants, acquirers, acquirer processors, payment gatewaysacting on behalf of merchants, payment enablers (e.g., originalequipment manufacturers, mobile network operators, and/or the like),digital wallet providers, issuers, third-party wallet providers, paymentprocessing networks, and/or the like. In some non-limiting embodimentsor aspects, a token requestor may request tokens for multiple domainsand/or channels. Additionally or alternatively, a token requestor may beregistered and identified uniquely by the token service provider withinthe tokenization ecosystem. For example, during token requestorregistration, the token service provider may formally process a tokenrequestor's application to participate in the token service system. Insome non-limiting embodiments or aspects, the token service provider maycollect information pertaining to the nature of the requestor andrelevant use of tokens to validate and formally approve the tokenrequestor and establish appropriate domain restriction controls.Additionally or alternatively, successfully registered token requestorsmay be assigned a token requestor identifier that may also be enteredand maintained within the token vault. In some non-limiting embodimentsor aspects, token requestor identifiers may be revoked and/or tokenrequestors may be assigned new token requestor identifiers. In somenon-limiting embodiments or aspects, this information may be subject toreporting and audit by the token service provider.

As used herein, the term a “token service provider” may refer to anentity including one or more server computers in a token service systemthat generates, processes and maintains payment tokens. For example, thetoken service provider may include or be in communication with a tokenvault where the generated tokens are stored. Additionally oralternatively, the token vault may maintain one-to-one mapping between atoken and a PAN represented by the token. In some non-limitingembodiments or aspects, the token service provider may have the abilityto set aside licensed BINs as token BINs to issue tokens for the PANsthat may be submitted to the token service provider. In somenon-limiting embodiments or aspects, various entities of a tokenizationecosystem may assume the roles of the token service provider. Forexample, payment networks and issuers or their agents may become thetoken service provider by implementing the token services according tonon-limiting embodiments or aspects of the presently disclosed subjectmatter. Additionally or alternatively, a token service provider mayprovide reports or data output to reporting tools regarding approved,pending, or declined token requests, including any assigned tokenrequestor ID. The token service provider may provide data output relatedto token-based transactions to reporting tools and applications andpresent the token and/or PAN as appropriate in the reporting output. Insome non-limiting embodiments or aspects, the EMVCo standardsorganization may publish specifications defining how tokenized systemsmay operate. For example, such specifications may be informative, butthey are not intended to be limiting upon any of the presently disclosedsubject matter.

As used herein, the term “token vault” may refer to a repository thatmaintains established token-to-PAN mappings. For example, the tokenvault may also maintain other attributes of the token requestor that maybe determined at the time of registration and/or that may be used by thetoken service provider to apply domain restrictions or other controlsduring transaction processing. In some non-limiting embodiments oraspects, the token vault may be a part of a token service system. Forexample, the token vault may be provided as a part of the token serviceprovider. Additionally or alternatively, the token vault may be a remoterepository accessible by the token service provider. In somenon-limiting embodiments or aspects, token vaults, due to the sensitivenature of the data mappings that are stored and managed therein, may beprotected by strong underlying physical and logical security.Additionally or alternatively, a token vault may be operated by anysuitable entity, including a payment network, an issuer, clearinghouses, other financial institutions, transaction service providers,and/or the like.

As used herein, the term “merchant” may refer to one or more entities(e.g., operators of retail businesses that provide goods and/orservices, and/or access to goods and/or services, to a user (e.g., acustomer, a consumer, a customer of the merchant, and/or the like) basedon a transaction (e.g., a payment transaction)). As used herein,“merchant system” may refer to one or more computer systems operated byor on behalf of a merchant, such as a server computer executing one ormore software applications. As used herein, the term “product” may referto one or more goods and/or services offered by a merchant.

As used herein, a “point-of-sale (POS) device” may refer to one or moredevices, which may be used by a merchant to initiate transactions (e.g.,a payment transaction), engage in transactions, and/or processtransactions. For example, a POS device may include one or morecomputers, peripheral devices, card readers, near-field communication(NFC) receivers, radio frequency identification (RFID) receivers, and/orother contactless transceivers or receivers, contact-based receivers,payment terminals, computers, servers, input devices, and/or the like.

As used herein, a “point-of-sale (POS) system” may refer to one or morecomputers and/or peripheral devices used by a merchant to conduct atransaction. For example, a POS system may include one or more POSdevices and/or other like devices that may be used to conduct a paymenttransaction. A POS system (e.g., a merchant POS system) may also includeone or more server computers programmed or configured to process onlinepayment transactions through webpages, mobile applications, and/or thelike.

As used herein, the term “transaction service provider” may refer to anentity that receives transaction authorization requests from merchantsor other entities and provides guarantees of payment, in some casesthrough an agreement between the transaction service provider and theissuer institution. In some non-limiting embodiments or aspects, atransaction service provider may include a credit card company, a debitcard company, and/or the like. As used herein, the term “transactionservice provider system” may also refer to one or more computer systemsoperated by or on behalf of a transaction service provider, such as atransaction processing server executing one or more softwareapplications. A transaction processing server may include one or moreprocessors and, in some non-limiting embodiments or aspects, may beoperated by or on behalf of a transaction service provider.

As used herein, the term “acquirer” may refer to an entity licensed bythe transaction service provider and approved by the transaction serviceprovider to originate transactions (e.g., payment transactions) using aportable financial device associated with the transaction serviceprovider. As used herein, the term “acquirer system” may also refer toone or more computer systems, computer devices, and/or the like operatedby or on behalf of an acquirer. The transactions the acquirer mayoriginate may include payment transactions (e.g., purchases, originalcredit transactions (OCTs), account funding transactions (AFTs), and/orthe like). In some non-limiting embodiments or aspects, the acquirer maybe authorized by the transaction service provider to assign merchant orservice providers to originate transactions using a portable financialdevice of the transaction service provider. The acquirer may contractwith payment facilitators to enable the payment facilitators to sponsormerchants. The acquirer may monitor compliance of the paymentfacilitators in accordance with regulations of the transaction serviceprovider. The acquirer may conduct due diligence of the paymentfacilitators and ensure that proper due diligence occurs before signinga sponsored merchant. The acquirer may be liable for all transactionservice provider programs that the acquirer operates or sponsors. Theacquirer may be responsible for the acts of the acquirer's paymentfacilitators, merchants that are sponsored by an acquirer's paymentfacilitators, and/or the like. In some non-limiting embodiments oraspects, an acquirer may be a financial institution, such as a bank.

As used herein, the terms “electronic wallet,” “electronic wallet mobileapplication,” and “digital wallet” may refer to one or more electronicdevices and/or one or more software applications configured to initiateand/or conduct transactions (e.g., payment transactions, electronicpayment transactions, and/or the like). For example, an electronicwallet may include a user device (e.g., a mobile device) executing anapplication program and server-side software and/or databases formaintaining and providing transaction data to the user device. As usedherein, the term “electronic wallet provider” may include an entity thatprovides and/or maintains an electronic wallet and/or an electronicwallet mobile application for a user (e.g., a customer). Examples of anelectronic wallet provider include, but are not limited to, GoogleWallet™, Android Pay®, Apple Pay®, and Samsung Pay®. In somenon-limiting examples, a financial institution (e.g., an issuerinstitution) may be an electronic wallet provider. As used herein, theterm “electronic wallet provider system” may refer to one or morecomputer systems, computer devices, servers, groups of servers, and/orthe like operated by or on behalf of an electronic wallet provider.

As used herein, the term “portable financial device” may refer to apayment card (e.g., a credit or debit card), a gift card, a smartcard,smart media, a payroll card, a healthcare card, a wrist band, amachine-readable medium containing account information, a keychaindevice or fob, an RFID transponder, a retailer discount or loyalty card,a cellular phone, an electronic wallet mobile application, a personaldigital assistant (PDA), a pager, a security card, a computer, an accesscard, a wireless terminal, a transponder, and/or the like. In somenon-limiting embodiments or aspects, the portable financial device mayinclude volatile or non-volatile memory to store information (e.g., anaccount identifier, a name of the account holder, and/or the like).

As used herein, the term “payment gateway” may refer to an entity and/ora payment processing system operated by or on behalf of such an entity(e.g., a merchant service provider, a payment service provider, apayment facilitator, a payment facilitator that contracts with anacquirer, a payment aggregator, and/or the like), which provides paymentservices (e.g., transaction service provider payment services, paymentprocessing services, and/or the like) to one or more merchants. Thepayment services may be associated with the use of portable financialdevices managed by a transaction service provider. As used herein, theterm “payment gateway system” may refer to one or more computer systems,computer devices, servers, groups of servers, and/or the like operatedby or on behalf of a payment gateway and/or to a payment gateway itself.The term “payment gateway mobile application” may refer to one or moreelectronic devices and/or one or more software applications configuredto provide payment services for transactions (e.g., paymenttransactions, electronic payment transactions, and/or the like).

As used herein, the terms “client” and “client device” may refer to oneor more client-side devices or systems (e.g., remote from a transactionservice provider) used to initiate or facilitate a transaction (e.g., apayment transaction). As an example, a “client device” may refer to oneor more POS devices used by a merchant, one or more acquirer hostcomputers used by an acquirer, one or more mobile devices used by auser, and/or the like. In some non-limiting embodiments or aspects, aclient device may be an electronic device configured to communicate withone or more networks and initiate or facilitate transactions. Forexample, a client device may include one or more computers, portablecomputers, laptop computers, tablet computers, mobile devices, cellularphones, wearable devices (e.g., watches, glasses, lenses, clothing,and/or the like), PDAs, and/or the like. Moreover, a “client” may alsorefer to an entity (e.g., a merchant, an acquirer, and/or the like) thatowns, utilizes, and/or operates a client device for initiatingtransactions (e.g., for initiating transactions with a transactionservice provider).

As used herein, the term “server” may refer to one or more computingdevices (e.g., processors, storage devices, similar computer components,and/or the like) that communicate with client devices and/or othercomputing devices over a network (e.g., a public network, the Internet,a private network, and/or the like) and, in some examples, facilitatecommunication among other servers and/or client devices. It will beappreciated that various other arrangements are possible. As usedherein, the term “system” may refer to one or more computing devices orcombinations of computing devices (e.g., processors, servers, clientdevices, software applications, components of such, and/or the like).Reference to “a device,” “a server,” “a processor,” and/or the like, asused herein, may refer to a previously-recited device, server, orprocessor that is recited as performing a previous step or function, adifferent server or processor, and/or a combination of servers and/orprocessors. For example, as used in the specification and the claims, afirst server or a first processor that is recited as performing a firststep or a first function may refer to the same or different server orthe same or different processor recited as performing a second step or asecond function.

Non-limiting embodiments or aspects of the disclosed subject matter aredirected systems, methods, and computer program products for configuringa gateway, including, but not limited to, configuring a payment gateway.For example, non-limiting embodiments or aspects of the disclosedsubject matter provide configuring a gateway with a configurationservice to retrieve current configuration files in response todetermining current version data stored on a remote server has beenmodified. Such embodiments or aspects provide techniques and systems fordynamic updating/retrieval of the configuration file(s) without the needto build and/or deploy the entire application package to (each node of)the gateway. Additionally or alternatively, such techniques and systemsmay include monitoring the current version data by (each node of) thegateway so that (each node of) the gateway may automaticallydetermine/be notified whenever there is a modification of theconfiguration file and retrieve the current version of the configurationfile automatically. Additionally or alternatively, such techniques andsystems may include (simultaneous and/or parallel) retrieval of theconfiguration file from the (central) repository by (each node of) thegateway (e.g., rather than individual and/or series uploading of theapplication package to each node). As such, (each node of) the gatewaymay identify and retrieve the current version of the configuration fileusing less computing resources and with less delay (e.g., compared touploading the entire application package to each node of the gatewayindividually), and the configuration file need only be uploaded once tothe (central) repository, from which (each node of) the gateway mayretrieve/download a copy. Accordingly, such techniques and systems mayreduce total cost (e.g., in terms of computing resources, price, and/orthe like) and reduce time to market. Additionally or alternatively,where there is a production issue that can be resolved by changing theconfiguration file, such techniques or systems may allow theconfiguration file to be modified and uploaded to the (central)repository, and the modified/current version of the configuration filemay be automatically retrieved by all nodes. Additionally oralternatively, such techniques and systems may reduce transaction lossas (each node of) the gateway need not be taken offline and the timeperiod to deploy the modified/updated configuration file is reduced.Additionally or alternatively, such techniques and systems may reduceoperation cost, new application code, and/or packaging need not bebuilt/deployed to deploy the modified/updated configuration file.

For the purpose of illustration, in the following description, while thepresently disclosed subject matter is described with respect to methods,systems, and computer program products for configuring a gateway, e.g.,dynamically configuring a payment gateway, one skilled in the art willrecognize that the disclosed subject matter is not limited to theillustrative embodiments or aspects. For example, the methods, systems,and computer program products described herein may be used with a widevariety of settings, such as configuring a gateway and/or computersystem in any setting suitable for using such gateway and/or computersystem or for evaluating data based on such configurations, e.g., todetect fraud, to manage network traffic, to manage and/or filterelectronic communications (e.g., emails, message, posts, and/or thelike), to manage creation of and/or changes to accounts (e.g., at abank, at a merchant, at a website, at a social networking platform,and/or the like), and/or the like.

Referring now to FIG. 1, FIG. 1 is a diagram of a non-limitingembodiment or aspect of an environment 100 in which systems, products,and/or methods, as described herein, may be implemented. As shown inFIG. 1, environment 100 includes transaction service provider system102, issuer system 104, customer device 106, merchant system 108,acquirer system 110, and network 112.

Transaction service provider system 102 may include one or more devicescapable of receiving information from and/or communicating informationto issuer system 104, customer device 106, merchant system 108, and/oracquirer system 110 via network 112. For example, transaction serviceprovider system 102 may include a computing device, such as a server(e.g., a transaction processing server), a group of servers, and/orother like devices. In some non-limiting embodiments or aspects,transaction service provider system 102 may be associated with atransaction service provider as described herein. In some non-limitingembodiments or aspects, transaction service provider system 102 may bein communication with a data storage device, which may be local orremote to transaction service provider system 102. In some non-limitingembodiments or aspects, transaction service provider system 102 may becapable of receiving information from, storing information in,communicating information to, or searching information stored in thedata storage device.

Issuer system 104 may include one or more devices capable of receivinginformation and/or communicating information to transaction serviceprovider system 102, customer device 106, merchant system 108, and/oracquirer system 110 via network 112. For example, issuer system 104 mayinclude a computing device, such as a server, a group of servers, and/orother like devices. In some non-limiting embodiments or aspects, issuersystem 104 may be associated with an issuer institution as describedherein. For example, issuer system 104 may be associated with an issuerinstitution that issued a credit account, debit account, credit card,debit card, and/or the like to a user associated with customer device106.

Customer device 106 may include one or more devices capable of receivinginformation from and/or communicating information to transaction serviceprovider system 102, issuer system 104, merchant system 108, and/oracquirer system 110 via network 112. Additionally or alternatively, eachcustomer device 106 may include a device capable of receivinginformation from and/or communicating information to other customerdevices 106 via network 112, another network (e.g., an ad hoc network, alocal network, a private network, a virtual private network, and/or thelike), and/or any other suitable communication technique. For example,customer device 106 may include a client device and/or the like. In somenon-limiting embodiments or aspects, customer device 106 may or may notbe capable of receiving information (e.g., from merchant system 108 orfrom another customer device 106) via a short-range wirelesscommunication connection (e.g., an NFC communication connection, an RFIDcommunication connection, a Bluetooth® communication connection, aZigbee® communication connection, and/or the like), and/or communicatinginformation (e.g., to merchant system 108) via a short-range wirelesscommunication connection.

Merchant system 108 may include one or more devices capable of receivinginformation from and/or communicating information to transaction serviceprovider system 102, issuer system 104, customer device 106, and/oracquirer system 110 via network 112. Merchant system 108 may alsoinclude a device capable of receiving information from customer device106 via network 112, a communication connection (e.g., an NFCcommunication connection, an RFID communication connection, a Bluetooth®communication connection, a Zigbee® communication connection, and/or thelike) with customer device 106, and/or the like, and/or communicatinginformation to customer device 106 via the network, the communicationconnection, and/or the like. In some non-limiting embodiments oraspects, merchant system 108 may include a computing device, such as aserver, a group of servers, a client device, a group of client devices,and/or other like devices. In some non-limiting embodiments or aspects,merchant system 108 may be associated with a merchant as describedherein. In some non-limiting embodiments or aspects, merchant system 108may include one or more client devices. For example, merchant system 108may include a client device that allows a merchant to communicateinformation to transaction service provider system 102. In somenon-limiting embodiments or aspects, merchant system 108 may include oneor more devices, such as computers, computer systems, and/or peripheraldevices capable of being used by a merchant to conduct a transactionwith a user. For example, merchant system 108 may include a POS deviceand/or a POS system.

Acquirer system 110 may include one or more devices capable of receivinginformation from and/or communicating information to transaction serviceprovider system 102, issuer system 104, customer device 106, and/ormerchant system 108 via network 112. For example, acquirer system 110may include a computing device, a server, a group of servers, and/or thelike. In some non-limiting embodiments or aspects, acquirer system 110may be associated with an acquirer as described herein.

Network 112 may include one or more wired and/or wireless networks. Forexample, network 112 may include a cellular network (e.g., a long-termevolution (LTE) network, a third generation (3G) network, a fourthgeneration (4G) network, a code division multiple access (CDMA) network,and/or the like), a public land mobile network (PLMN), a local areanetwork (LAN), a wide area network (WAN), a metropolitan area network(MAN), a telephone network (e.g., the public switched telephone network(PSTN)), a private network (e.g., a private network associated with atransaction service provider), an ad hoc network, an intranet, theInternet, a fiber optic-based network, a cloud computing network, and/orthe like, and/or a combination of these or other types of networks.

The number and arrangement of systems, devices, and/or networks shown inFIG. 1 are provided as an example. There may be additional systems,devices, and/or networks; fewer systems, devices, and/or networks;different systems, devices, and/or networks; and/or differently arrangedsystems, devices, and/or networks than those shown in FIG. 1.Furthermore, two or more systems or devices shown in FIG. 1 may beimplemented within a single system or device, or a single system ordevice shown in FIG. 1 may be implemented as multiple, distributedsystems or devices. Additionally or alternatively, a set of systems(e.g., one or more systems) or a set of devices (e.g., one or moredevices) of environment 100 may perform one or more functions describedas being performed by another set of systems or another set of devicesof environment 100.

Referring now to FIG. 2, FIG. 2 is a diagram of example components of adevice 200. Device 200 may correspond to one or more devices oftransaction service provider system 102, one or more devices of issuersystem 104, customer device 106, one or more devices of merchant system108, and/or one or more devices of acquirer system 110. In somenon-limiting embodiments or aspects, transaction service provider system102, issuer system 104, customer device 106, merchant system 108, and/oracquirer system 110 may include at least one device 200 and/or at leastone component of device 200. As shown in FIG. 2, device 200 may includebus 202, processor 204, memory 206, storage component 208, inputcomponent 210, output component 212, and communication interface 214.

Bus 202 may include a component that permits communication among thecomponents of device 200. In some non-limiting embodiments or aspects,processor 204 may be implemented in hardware, firmware, or a combinationof hardware and software. For example, processor 204 may include aprocessor (e.g., a central processing unit (CPU), a graphics processingunit (GPU), an accelerated processing unit (APU), and/or the like), amicroprocessor, a digital signal processor (DSP), and/or any processingcomponent (e.g., a field-programmable gate array (FPGA), anapplication-specific integrated circuit (ASIC), and/or the like), and/orthe like, which can be programmed to perform a function. Memory 206 mayinclude random access memory (RAM), read only memory (ROM), and/oranother type of dynamic or static storage device (e.g., flash memory,magnetic memory, optical memory, and/or the like) that storesinformation and/or instructions for use by processor 204.

Storage component 208 may store information and/or software related tothe operation and use of device 200. For example, storage component 208may include a hard disk (e.g., a magnetic disk, an optical disk, amagneto-optic disk, a solid state disk, and/or the like), a compact disc(CD), a digital versatile disc (DVD), a floppy disk, a cartridge, amagnetic tape, and/or another type of computer-readable medium, alongwith a corresponding drive.

Input component 210 may include a component that permits device 200 toreceive information, such as via user input (e.g., a touch screendisplay, a keyboard, a keypad, a mouse, a button, a switch, amicrophone, a camera, and/or the like). Additionally or alternatively,input component 210 may include a sensor for sensing information (e.g.,a global positioning system (GPS) component, an accelerometer, agyroscope, an actuator, and/or the like). Output component 212 mayinclude a component that provides output information from device 200(e.g., a display, a speaker, one or more light-emitting diodes (LEDs),and/or the like).

Communication interface 214 may include a transceiver-like component(e.g., a transceiver, a receiver and transmitter that are separate,and/or the like) that enables device 200 to communicate with otherdevices, such as via a wired connection, a wireless connection, or acombination of wired and wireless connections. Communication interface214 may permit device 200 to receive information from another deviceand/or provide information to another device. For example, communicationinterface 214 may include an Ethernet interface, an optical interface, acoaxial interface, an infrared interface, a radio frequency (RF)interface, a universal serial bus (USB) interface, a Wi-Fi® interface, aBluetooth® interface, a Zigbee® interface, a cellular network interface,and/or the like.

Device 200 may perform one or more processes described herein. Device200 may perform these processes based on processor 204 executingsoftware instructions stored by a computer-readable medium, such asmemory 206 and/or storage component 208. A computer-readable medium(e.g., a non-transitory computer-readable medium) is defined herein as anon-transitory memory device. A non-transitory memory device includesmemory space located inside of a single physical storage device ormemory space spread across multiple physical storage devices.

Software instructions may be read into memory 206 and/or storagecomponent 208 from another computer-readable medium or from anotherdevice via communication interface 214. When executed, softwareinstructions stored in memory 206 and/or storage component 208 may causeprocessor 204 to perform one or more processes described herein.Additionally or alternatively, hardwired circuitry may be used in placeof or in combination with software instructions to perform one or moreprocesses described herein. Thus, embodiments or aspects describedherein are not limited to any specific combination of hardware circuitryand software.

The number and arrangement of components shown in FIG. 2 are provided asan example. In some non-limiting embodiments or aspects, device 200 mayinclude additional components, fewer components, different components,or differently arranged components than those shown in FIG. 2.Additionally or alternatively, a set of components (e.g., one or morecomponents) of device 200 may perform one or more functions described asbeing performed by another set of components of device 200.

Referring now to FIG. 3, FIG. 3 is a flowchart of a non-limitingembodiment or aspect of a process 300 for configuring a gateway. In somenon-limiting embodiments or aspects, one or more of the steps of process300 may be performed (e.g., completely, partially, and/or the like) bytransaction service provider system 102 (e.g., one or more devices oftransaction service provider system 102). In some non-limitingembodiments or aspects, one or more of the steps of process 300 may beperformed (e.g., completely, partially, and/or the like) by anothersystem, another device, another group of systems, or another group ofdevices, separate from or including transaction service provider system102, such as issuer system 104 (e.g., one or more devices of issuersystem 104), customer device 106, merchant system 108 (e.g., one or moredevices of merchant system 108), and/or acquirer system 110 (e.g., oneor more devices of acquirer system 110). In some non-limitingembodiments or aspects, with reference to FIG. 3, a gateway (and/or nodethereof) may be the same as or similar to one or more devices oftransaction service provider system 102. Additionally or alternatively,at least one first server may be the same as or similar to one or moredevices of transaction service provider system 102. Additionally oralternatively, a repository and/or at least one second server may be thesame as or similar to one or more devices of transaction serviceprovider system 102.

As shown in FIG. 3, at step 310, process 300 may include monitoringcurrent version data. For example, a gateway node (e.g., one or moredevices of transaction service provider system 102) may monitor thecurrent version data stored on at least one first server (e.g., one ormore devices of transaction service provider system 102), which may beseparate from and/or remote from the gateway node. In some non-limitingembodiments or aspects, the gateway node may be a node of an onlinegateway service (OGS). In some non-limiting embodiments or aspects, thecurrent version data may be associated with a current version of aconfiguration file for the gateway (and/or for nodes thereof). In somenon-limiting embodiments or aspects, the current version of theconfiguration file may be stored on at least one repository.Additionally or alternatively, the at least one repository may includeat least one second server (e.g., one or more devices of transactionservice provider system 102). In some non-limiting embodiments oraspects, the repository (e.g., second server(s)) may be separate fromand/or remote from the gateway and the first server(s). In somenon-limiting embodiments or aspects, the repository may include acontent platform (e.g., Hitachi Content Platform (HCP) and/or the like).

In some non-limiting embodiments or aspects, monitoring the currentversion data may include using a first agent on the gateway node tomonitor a view of the current version data from a second agent on the atleast one first server. For example, the first agent may include aclient agent of a cluster. Additionally or alternatively, the secondagent may include a server agent of the cluster. In some non-limitingembodiments or aspects, the first agent may be a Consul client agent(e.g., Consul agent in client mode) of the gateway node, and the secondagent may be a Consul server agent (e.g., Consul agent in server mode)of the first server. In some non-limiting embodiments or aspects, theclient agent may perform a “watch” command to monitor the currentversion data.

In some non-limiting embodiments or aspects, the current version datamay include data identifying the current version of the configurationfile. In some non-limiting embodiments, the current version data mayinclude a value of at least one field (e.g., a version number). In somenon-limiting embodiments, the current version data may include at leastone key associated with at least one identifier of the configurationfile and at least one value associated with the current version (e.g., acurrent version number). For example, the key(s) may include anysuitable key(s) uniquely associated with the identifier. Additionally oralternatively, the identifier(s) may include any suitable identifier(s)to uniquely identify the configuration file. Additionally oralternatively, the value(s) may include any suitable value or set ofvalues to uniquely identify the version (e.g., a single number, a set ofnumbers, a semantic versioning number, and/or the like). For the purposeof illustration, a semantic versioning number may include three numbersseparated by periods (e.g., 3.1.2) or four numbers separated by periods(e.g., 3.1.2.1), and the numbers may represent major version, minorversion, patch version, and/or build version, which may be in thatorder. In some non-limiting embodiments, the current version data mayinclude an identifier (e.g., a file name, a field name, an addressand/or location on the repository, and/or the like) such as“GatewayCurrentVersion” (or, e.g., “CurrentConfigVersion,”“CieloCurrentVersion” for a Cielo gateway, and/or the like) and aversion number (e.g., 3.1.2 and/or the like).

In some non-limiting embodiments or aspects, each version of theconfiguration file (e.g., the current version thereof) may include atleast one of validation rules (e.g., “GatewayValidation,” “GatewayRPG,”“CieloRPG,” and/or the like), transformation rules (e.g.,“GatewayTransformation,” “CieloTransformation,” and/or the like), errorcode and/or response code mapping (e.g., “GatewayCodeMap,”“GatewayErrorCode,” “CieloErrorCode,” and/or the like), and/or anycombination thereof. In some non-limiting embodiments or aspects, eachof these listed items may include one or more files (e.g., XML filesand/or the like). Additionally or alternatively, each version of theconfiguration file (e.g., the current version thereof) may include atleast one application programming interface (API).

As shown in FIG. 3, at step 320, process 300 may include modifying thecurrent version data. For example, the current version data stored onthe first server(s) (e.g., one or more devices of transaction serviceprovider system 102) may be modified. In some non-limiting embodimentsor aspects, the current version data stored on the first server(s) maybe modified after and/or in response to uploading of the current versionof the configuration file to at least one repository (e.g., one or moredevices of transaction service provider system 102). In somenon-limiting embodiments or aspects, the at least one repository mayinclude at least one second server (e.g., one or more devices oftransaction service provider system 102), which may be separate fromand/or remote from the gateway and the first server(s).

In some non-limiting embodiments or aspects, modifying the currentversion data may include modifying (e.g., changing, replacing, and/orthe like) at least a portion of the current version data. For example,the value(s) (e.g., version number(s)) of the current version data maybe modified to reflect the availability of a new (current) version ofthe configuration file. For the purpose of illustration, a valueassociated with a previous version (e.g., 3.1.2) may be replaced with avalue of the current version (e.g., 3.1.4). Additionally oralternatively, in some non-limiting embodiments or aspects, theidentifier (e.g., a file name, a field name, an address and/or locationon the repository, and/or the like) may be modified to reflect theavailability of a new (current version of the) configuration file.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may be uploaded to the repository before modifyingthe current version data. For example, the current version data may bemodified in response to the uploading of the current version of theconfiguration file to the repository. For example, when a new (currentversion of the) configuration file is uploaded (e.g., from an operationsgroup, a developer, a product and/or application owner, another remotedevice and/or server, software such as Presto, and/or the like), thecurrent version data (e.g., “GatewayCurrentVersion”) may be modified(e.g., automatically based on the current version number or identifier,manually by an operations group or a product and/or application owner,and/or the like) at the first server (e.g., Consul server agent).Additionally or alternatively, in response to the modification of thecurrent version data, the gateway node (e.g., Consul client agentperforming a “watch” of the current version data) may determine and/orbe notified of the change, as described herein.

As shown in FIG. 3, at step 330, process 300 may include invoking aconfiguration service. For example, the gateway node (e.g., one or moredevices of transaction service provider system 102) may invoke theconfiguration service. In some non-limiting embodiments or aspects, thegateway node may invoke the configuration service after and/or inresponse to determining that the current version data stored on thefirst server(s) (e.g., one or more devices of transaction serviceprovider system 102) has been modified. In some non-limiting embodimentsor aspects, the configuration service may retrieve the current versionof the configuration file from the repository (and/or second server(s))based on the current version data.

In some non-limiting embodiments or aspects, the gateway node maydetermine the current version data stored on the first server(s) hasbeen modified based on using an agent (e.g., client agent such as Consulclient agent) to detect that the view of the current version data hasbeen modified. Additionally or alternatively, the gateway node maydetermine the current version data stored on the first server(s) hasbeen modified based on receiving a notification (e.g., from the firstserver) that the current version data has been modified.

In some non-limiting embodiments, the configuration service may provideservices around retrieving configuration files from the repository(e.g., HCP). For example, the gateway node (e.g., node of OGS) may readthe current version data (e.g., “GatewayCurrentVersion”) from the firstserver and/or receive a notification from the first server that thecurrent version data has been modified. Additionally or alternatively,the gateway node may invoke the configuration service to retrieve (e.g.,download) the current version of the configuration file from therepository (e.g., HCP) based on the current version data.

As shown in FIG. 3, at step 340, process 300 may include storing a copyof the current version of the configuration file. For example, thegateway node (e.g., one or more devices of transaction service providersystem 102) may store a copy of the current version of the configurationfile retrieved by the configuration service. For example, the gatewaynode may store the configuration file in a memory (e.g., cache memory).

In some non-limiting embodiments or aspects, the gateway node may clearthe previous version of the configuration file, which may be before,simultaneously with, or after the gateway node invokes the configurationservice to retrieve the current version of the configuration file and/orbefore, simultaneously with, or after the gateway node stores (e.g.,caches) the current version of the configuration file. For example, thegateway node may delete a copy of a previous version of theconfiguration file from its memory (e.g., cache memory).

As shown in FIG. 3, at step 350, process 300 may include applying theconfiguration file. For example, the gateway node (e.g., one or moredevices of transaction service provider system 102) may use theconfiguration file with one or more applications (e.g., rapid processinggateway (RPG) applications) deployed thereon.

In some non-limiting embodiments or aspects, the gateway may include apayment gateway (e.g., OGS), and the gateway node may include a paymentgateway application (e.g., RPG). For example, the gateway node mayreceive transaction data associated with a payment transaction.Additionally or alternatively, the gateway node may take action on thepayment transaction (e.g., validate the transaction, reject thetransaction, and/or the like) based (at least partially) on the copy ofthe current version of the configuration file stored on the gatewaynode.

In some non-limiting embodiments or aspects, the current version of theconfiguration file may include at least one of validation rules,transformation rules, error code mapping, or any combination thereof.Additionally or alternatively, applying the configuration file mayinclude the gateway node applying the validation rules, transformationrules, error code mapping, or any combination thereof, respectively, toa transaction received by the gateway node.

Referring now to FIG. 4, FIG. 4 is a diagram of an exemplaryimplementation 400 of a non-limiting embodiment or aspect relating toprocess 300 shown in FIG. 3. As shown in FIG. 4, implementation 400 mayinclude user device 402 a, first server 402 b, gateway runtime stack 402c, monitor 402 d, gateway node 402 e, rapid processing gateway 402 f,configuration service 402 g, repository 402 h, gateway module 402 i,previous version of configuration files 402 j (including previoustransformation rule file 402 k, previous validation rule file 402 l,and/or previous code mapping file 402 m), and/or current version ofconfiguration files 402 n (including current transformation rule file402 o, current validation rule file 402 p, and/or current code mappingfile 402 q). In some non-limiting embodiments or aspects, each of userdevice 402 a, first server 402 b, gateway runtime stack 402 c, monitor402 d, gateway node 402 e, rapid processing gateway 402 f, configurationservice 402 g, repository 402 h, gateway module 402 i, previous versionof configuration files 402 j (including previous transformation rulefile 402 k, previous validation rule file 402 l, and/or previous codemapping file 402 m), and/or current version of configuration files 402 n(including current transformation rule file 402 o, current validationrule file 402 p, and/or current code mapping file 402 q) may beimplemented (e.g., completely, partially, and/or the like) bytransaction service provider system 102 (e.g., one or more devices oftransaction service provider system 102). Additionally or alternatively,one or more of user device 402 a, first server 402 b, gateway runtimestack 402 c, monitor 402 d, gateway node 402 e, rapid processing gateway402 f, configuration service 402 g, repository 402 h, gateway module 402i, previous version of configuration files 402 j (including previoustransformation rule file 402 k, previous validation rule file 402 l,and/or previous code mapping file 402 m), and/or current version ofconfiguration files 402 n (including current transformation rule file402 o, current validation rule file 402 p, and/or current code mappingfile 402 q) may be implemented (e.g., completely, partially, and/or thelike) by another system, another device, another group of systems, oranother group of devices, separate from or including transaction serviceprovider system 102, such as issuer system 104 (e.g., one or moredevices of issuer system 104), customer device 106, merchant system 108(e.g., one or more devices of merchant system 108), and/or acquirersystem 110 (e.g., one or more devices of acquirer system 110).

In some non-limiting embodiments or aspects, user device 402 a mayinclude one or more devices (e.g., one or more devices of transactionservice provider system 102) of a user (e.g., an operations group, adeveloper, a product and/or application owner, and/or the like). In somenon-limiting embodiments or aspects, user device 402 a may be used toupload the current version(s) of the configuration file(s) to therepository 402 h, as described herein. Additionally or alternatively,user device 402 a may be used to modify (e.g., automatically based onuploading of the configuration files to the repository or manually) thecurrent version data on the first server 402 b, as described herein.

In some non-limiting embodiments or aspects, first server 402 b mayinclude one or more devices and/or servers (e.g., one or more devices oftransaction service provider system 102). In some non-limitingembodiments or aspects, first server 402 b may store the current versiondata, as described herein. Additionally or alternatively, first server402 b may notify gateway node 402 e (and/or the monitor 402 d) thereon,as described herein. In some non-limiting embodiments or aspects, firstserver 402 b may include a server agent (e.g., Consul server agent), asdescribed herein.

In some non-limiting embodiments or aspects, gateway runtime stack 402 cmay include one or more gateway nodes 402 e. For example, each gatewaynode 402 e may include one or more devices and/or servers (e.g., one ormore devices of transaction service provider system 102), as describedherein. In some non-limiting embodiments or aspects, gateway runtimestack 402 c may include an OGS runtime stack. Additionally oralternatively, gateway runtime stack 402 c may include a payment gatewayruntime stack. In some non-limiting embodiments, gateway runtime stack402 c may include additional functionality, services, devices, and/orthe like, in addition to gateway node(s) 402 e. For example, gatewayruntime stack 402 c may include monitor/agent 402 d (e.g., a clientagent such as a Consul client agent) to monitor the current version dataat first server 402 b, as described herein. Additionally oralternatively, each gateway node 402 e may have its own monitor/agent402 d (e.g., a client agent such as a Consul client agent), as describedherein.

In some non-limiting embodiments or aspects, gateway node 402 e mayinclude one or more devices and/or servers (e.g., one or more devices oftransaction service provider system 102), as described herein. In somenon-limiting embodiments or aspects, gateway node 402 e may includemonitor/agent 402 d (e.g., a client agent such as a Consul clientagent), as described herein. Additionally or alternatively, gateway node402 e may include gateway application(s) 402 f (e.g., RPG application)and/or a configuration service 402 g, as described herein. In somenon-limiting embodiments or aspects, in response to a determination thatthe current version data on first server 402 b has been modified (e.g.,based on monitor/agent 402 d detecting the current version data has beenand/or receiving a notification that the current data has beenmodified), gateway node 402 e may invoke the configuration server 402 gto retrieve the current version(s) of the configuration file(s) fromrepository 402 h, as described herein.

In some non-limiting embodiments or aspects, repository 402 h mayinclude one or more devices and/or servers (e.g., one or more devices oftransaction service provider system 102), as described herein.Additionally or alternatively, repository 402 h may include one or moregateway module(s) 402 i associated with versions of the configurationfile(s) uploaded to repository 402 h. In some non-limiting embodimentsor aspects, gateway module(s) 402 i may include modules for each of atleast one previous version of configuration file(s) 402 j and/or currentversion of configuration file(s) 402 n. For example, previous version ofconfiguration file(s) 402 j may each include one or more files (e.g.,XML files and or the like). For the purpose of illustration, such filesmay include previous transformation rule file 402 k (e.g.,“GatewayRPG.xml”), previous validation rule file 402 l (e.g.,“GatewayRPG.xml”), previous error and/or response code mapping file 402m (“GatewayErrorCode.xml”), and/or any combination thereof. Additionallyor alternatively, current version of configuration file(s) 402 n mayinclude one or more files (e.g., XML files and or the like). For thepurpose of illustration, such files may include current transformationrule file 402 o (e.g., “GatewayRPG.xml”), current validation rule file402 p (e.g., “GatewayRPG.xml”), current error and/or response codemapping file 402 q (“GatewayErrorCode.xml”), and/or any combinationthereof.

In some non-limiting embodiments or aspects, repository 402 h may beconfigured to store current version of configuration file(s) 402 n, asdescribed herein. In some non-limiting embodiments or aspects, firstserver(s) 402 b may be configured to store current version dataassociated with current version of configuration file(s) 402 n, asdescribed herein. Additionally or alternatively, first server(s) 402 bmay be remote and/or separate from repository 402 h, as describedherein. In some non-limiting embodiments or aspects, each gateway node402 e (e.g., of gateway runtime stack 402 c) may be remote from firstserver(s) 402 b and repository 402 h, as described herein. Additionallyor alternatively, each gateway node 402 e may be configured to monitorthe current version data stored on first server(s) 402 b (e.g., usingmonitor/agent 402 d), as described herein. Additionally oralternatively, in response to determining that the current version datastored on first server(s) 402 b has been modified (e.g., usingmonitor/agent 402 d), each gateway node 402 e may be configured toinvoke configuration service 402 g, as described herein. For example,configuration service 402 g may retrieve (e.g., each gateway node 402 emay be configured to use configuration server 402 g to retrieve) currentversion of configuration file(s) 402 n from repository 402 h based onthe current version data, as described herein. Additionally oralternatively, each gateway node 402 e may be configured to store a copyof current version of configuration file(s) 402 n retrieved byconfiguration service 402 g, as described herein.

In some non-limiting embodiments or aspects, gateway node 402 e may beconfigured to delete its copy of previous version of configurationfile(s) 402 j, as described herein. For example, gateway node 402 e maydelete the copy of previous version of configuration file(s) 402 jbefore, simultaneously with, or after invoking configuration service 402g to retrieve current version of configuration file(s) 402 n, asdescribed herein.

In some non-limiting embodiments or aspects, each gateway node 402 e maybe configured to apply the current version of configuration file(s) 402n after retrieval thereof, as described herein. In some non-limitingembodiments or aspects, the gateway (e.g., gateway runtime stack 402 cand/or gateway node(s) 402 e thereof) may include a payment gateway, asdescribed herein. Additionally or alternatively, each gateway node 402 emay receive transaction data associated with one or more paymenttransactions, as described herein. Additionally or alternatively, eachgateway node 402 e may apply current version of configuration file(s)402 n to the payment transaction(s) (e.g., to validate and/or rejecteach payment transaction based on the copy of current version ofconfiguration file 402 n), as described herein.

Although the disclosed subject matter has been described in detail forthe purpose of illustration based on what is currently considered to bethe most practical and preferred embodiments or aspects, it is to beunderstood that such detail is solely for that purpose and that thedisclosed subject matter is not limited to the disclosed embodiments oraspects, but, on the contrary, is intended to cover modifications andequivalent arrangements that are within the spirit and scope of theappended claims. For example, it is to be understood that the presentlydisclosed subject matter contemplates that, to the extent possible, oneor more features of any embodiment can be combined with one or morefeatures of any other embodiment.

What is claimed is:
 1. A method for configuring a payment gateway of atransaction service provider system, comprising: monitoring, by apayment gateway of a transaction service provider system that receivestransaction authorization requests from merchant systems andcommunicates with issuer systems, current validation rules version datastored on at least one first server, the current validation rulesversion data associated with a current version of a validation rulesconfiguration file for the payment gateway, the at least one firstserver remote from the payment gateway, wherein the current validationrules version data comprises at least one key associated with at leastone identifier of the validation rules configuration file and at leastone value associated with the current version, wherein monitoringcomprises performing, by a first agent on the payment gateway, a watchcommand to monitor a view of the at least one value from a second agenton the at least one first server based on the at least one keyassociated with the at least one identifier of the validation rulesconfiguration file; modifying, at the at least one first server, thecurrent validation rules version data; in response to determining, bythe payment gateway, that the current validation rules version datastored on the at least one first server has been modified, invoking aconfiguration service, wherein the configuration service retrieves thecurrent version of the validation rules configuration file from at leastone repository based on the current validation rules version data, theat least one repository comprising at least one second server remotefrom the payment gateway and the at least one first server; storing, bythe payment gateway, a copy of the current version of the validationrules configuration file retrieved by the configuration service;receiving, by the payment gateway, a first transaction authorizationrequest from a merchant system; applying, by the payment gateway, thecopy of the current version of the validation rules configuration fileto the first transaction authorization request; and validating, by thepayment gateway, the first transaction authorization request based onapplying the copy of the current version of the validation rulesconfiguration file to the first transaction authorization request. 2.The method of claim 1, wherein determining the current validation rulesversion data stored on the at least one first server has been modifiedcomprises detecting, by the first agent, that the view of the currentvalidation rules version data has been modified.
 3. The method of claim1, wherein the first agent comprises a client agent of a cluster, andthe second agent comprises a server agent of the cluster.
 4. The methodof claim 1, further comprising uploading, to the at least onerepository, the current version of the validation rules configurationfile before modifying the current validation rules version data.
 5. Themethod of claim 1, further comprising deleting, by the payment gateway,a copy of a previous version of the validation rules configuration file.6. A system for configuring a payment gateway of a transaction serviceprovider system, comprising: at least one repository configured to storea current version of a validation rules configuration file; at least onefirst server configured to store current validation rules version dataassociated with the current version of the validation rulesconfiguration file, the at least one first server remote from the atleast one repository; and a payment gateway of a transaction serviceprovider system that receives transaction authorization requests frommerchant systems and communicates with issuer systems, the paymentgateway remote from the at least one first server and the at least onerepository, the payment gateway configured to: monitor the currentvalidation rules version data stored on the at least one first server,wherein the current validation rules version data comprises at least onekey associated with at least one identifier of the validation rulesconfiguration file and at least one value associated with the currentversion, wherein monitoring comprises performing, by a first agent onthe payment gateway, a watch command to monitor a view of the at leastone value from a second agent on the at least one first server based onthe at least one key associated with the at least one identifier of thevalidation rules configuration file; in response to determining that thecurrent validation rules version data stored on the at least one firstserver has been modified, invoke a configuration service, wherein theconfiguration service retrieves the current version of the validationrules configuration file from the at least one repository based on thecurrent validation rules version data; store a copy of the currentversion of the validation rules configuration file retrieved by theconfiguration service; receive a first transaction authorization requestfrom a merchant system; apply the copy of the current version of thevalidation rules configuration file to the first transactionauthorization request; and validate the first transaction authorizationrequest based on applying the copy of the current version of thevalidation rules configuration file to the first transactionauthorization request.
 7. The system of claim 6, wherein determining thecurrent validation rules version data stored on the at least one firstserver has been modified comprises the first agent being configured todetect that the view of the current validation rules version data hasbeen modified.
 8. The system of claim 6, wherein the first agentcomprises a client agent of a cluster, and the second agent comprises aserver agent of the cluster.
 9. The system of claim 6, wherein the atleast one repository is configured to have the current version of thevalidation rules configuration file uploaded thereto, and wherein the atleast one first server is configured to have the current validationrules version data thereon modified in response to the current versionof the validation rules configuration file being uploaded to the atleast one repository.
 10. The system of claim 6, wherein the paymentgateway is configured to delete a copy of a previous version of thevalidation rules configuration file.
 11. A computer program product forconfiguring a payment gateway of a transaction service provider system,the computer program product comprising at least one non-transitorycomputer-readable medium including one or more instructions that, whenexecuted by at least one processor, cause the at least one processor to:monitor current validation rules version data stored on at least onefirst server, the current validation rules version data associated witha current version of a validation rules configuration file for a paymentgateway of a transaction service provider system that receivestransaction authorization requests from merchant systems andcommunicates with issuer systems, the at least one first server remotefrom the payment gateway, wherein the current validation rules versiondata comprises at least one key associated with at least one identifierof the validation rules configuration file and at least one valueassociated with the current version, wherein monitoring comprisesperforming, by a first agent on the payment gateway, a watch command tomonitor a view of the at least one value from a second agent on the atleast one first server based on the at least one key associated with theat least one identifier of the validation rules configuration file; inresponse to determining that the current validation rules version datastored on the at least one first server has been modified, invoke aconfiguration service, wherein the configuration service retrieves thecurrent version of the validation rules configuration file from at leastone repository based on the current validation rules version data, theat least one repository comprising at least one second server remotefrom the payment gateway and the at least one first server; store a copyof the current version of the validation rules configuration fileretrieved by the configuration service; receive a first transactionauthorization request from a merchant system; apply the copy of thecurrent version of the validation rules configuration file to the firsttransaction authorization request; and validate the first transactionauthorization request based on applying the copy of the current versionof the validation rules configuration file to the first transactionauthorization request.
 12. The computer program product of claim 11,wherein determining the current validation rules version data stored onthe at least one first server has been modified comprises detecting, bythe first agent, that the view of the current validation rules versiondata has been modified.
 13. The computer program product of claim 11,wherein the first agent comprises a client agent of a cluster, and thesecond agent comprises a server agent of the cluster.
 14. The computerprogram product of claim 11, wherein the one or more instructions, whenexecuted by the at least one processor, further cause the at least oneprocessor to upload, to the at least one repository, the current versionof the validation rules configuration file before modifying the currentvalidation rules version data.
 15. The computer program product of claim11, wherein the one or more instructions, when executed by the at leastone processor, further cause the at least one processor to delete a copyof a previous version of the validation rules configuration file.